Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa
File:                     AS852.roa (raw, json)
Hash identifier:          TeUTRLYntm2SRZOPkT4iGF33yTNH6UlaudYhkqeDl7E=
Subject key identifier:   F2:23:EE:D7:D6:4C:78:25:84:21:BB:6C:81:E8:5F:99:CD:D6:59:1C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5255C1CB484591107AD9803F8CEC8D2277019C8A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa
Signing time:             Wed 16 Oct 2024 15:44:57 +0000
ROA not before:           Wed 16 Oct 2024 15:39:57 +0000
ROA not after:            Wed 15 Oct 2025 15:44:57 +0000
asID:                     852
IP address blocks:        216.227.212.0/23 maxlen: 23
                          216.227.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:55:c1:cb:48:45:91:10:7a:d9:80:3f:8c:ec:8d:22:77:01:9c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 16 15:39:57 2024 GMT
            Not After : Oct 15 15:44:57 2025 GMT
        Subject: CN=F223EED7D64C78258421BB6C81E85F99CDD6591C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:45:b3:8b:a8:8f:5c:46:ea:23:5d:e2:c7:
                    8f:a3:b8:8c:e7:34:05:72:a7:c6:e5:6b:9f:09:d7:
                    f9:8e:a8:69:08:a1:60:a0:a1:cc:57:3f:64:16:90:
                    a9:fd:ab:38:eb:08:b4:86:6f:0a:40:9f:4b:32:8a:
                    75:66:7b:c6:16:2b:9a:56:b7:1e:0c:6b:c8:6a:53:
                    2e:4b:3b:85:dd:6a:7c:4f:63:84:03:74:0d:89:16:
                    73:d9:cc:81:ad:d8:bf:05:a3:8e:73:bf:b2:ea:f0:
                    8d:d2:e6:bf:ba:00:b2:71:da:6e:e3:b2:d1:ba:70:
                    48:79:72:95:20:46:3d:e6:02:3d:6a:0a:43:0a:95:
                    52:86:96:62:3c:1e:9b:b2:95:b7:a2:5b:61:5a:3b:
                    4f:37:c4:81:9c:64:99:30:ec:e6:7c:38:ca:83:19:
                    fe:2b:4a:12:62:6a:f8:ad:6b:36:62:1f:2e:14:2f:
                    95:36:7a:11:29:d8:d0:7b:45:e4:5e:62:b3:91:69:
                    1b:99:35:16:41:d4:69:89:db:50:e6:dd:8f:b9:7e:
                    cc:31:53:df:e8:0c:c2:ef:62:f4:bd:69:66:9c:ea:
                    29:0f:53:af:06:9c:98:76:aa:fc:20:0d:0d:b2:59:
                    5c:49:1f:24:db:9e:6b:91:d6:46:53:e6:4c:20:6a:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:EE:D7:D6:4C:78:25:84:21:BB:6C:81:E8:5F:99:CD:D6:59:1C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:f8:3a:4e:fe:3c:c2:c1:75:4d:87:73:11:f5:c5:ed:65:
         84:0f:4b:4f:2f:b6:61:5e:a6:8d:21:ec:60:c5:a8:10:be:d1:
         e9:8b:1b:47:9d:a0:1a:82:06:61:12:34:4b:d5:89:ba:4c:22:
         74:66:93:2a:85:ac:19:20:12:8a:43:ec:df:6b:a1:60:ef:12:
         16:7f:f9:2a:19:3e:a9:91:e4:8e:a9:ee:c0:8e:09:36:76:e0:
         71:ef:9d:0b:9b:99:01:f9:b6:31:67:81:0b:60:e4:db:ab:76:
         a1:35:e3:0b:bb:ae:3a:b7:68:09:04:5c:82:9f:6f:ef:b9:21:
         09:31:0f:4e:c1:9e:62:90:19:12:31:05:9c:a7:84:80:89:c1:
         6f:22:c0:79:c0:9c:bf:3f:67:60:f5:33:26:28:ba:74:82:d9:
         14:5c:e5:a9:15:f3:0c:0f:66:72:7d:b5:13:15:5c:99:93:e8:
         ce:55:70:91:79:10:c2:de:0d:ab:93:d0:1e:a6:b9:40:4d:7e:
         4d:b5:32:30:4e:62:00:58:78:fe:f2:09:90:ba:d1:be:58:2e:
         09:21:35:76:2b:56:fa:d2:6d:ae:f5:10:b9:d2:f8:07:25:94:
         c9:79:a3:4a:c4:42:21:c3:5b:97:fd:47:b8:29:f0:d0:dc:ff:
         64:74:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:51:29 2024 by rpki-client on console-ams.rpki-client.org